Forensic Focus

Leading digital forensics and DFIR news, analysis and discussion. Join us at

[Forensic Focus @ForensicFocus]

The Forensic Focus State of DFIR Survey is now open. Caseloads, AI, tools, hiring and the year ahead, in 8 minutes. It's anonymous, and everyone who takes part can get early access to the report. Closes 30 November. https://t.co/RWMK625jXw #DFIR

[Forensic Focus @ForensicFocus]

Today: Eric Zimmerman’s forensic tools migrate from .NET 9 to .NET 10 LTS; Six LEAPP tools add SHA-256 hashing, LVM2, LUKS, RAID support and new artifacts, and more. #digitalforensics https://t.co/yr0pYrgBmk

[Forensic Focus @ForensicFocus]

Digital evidence has evolved, but have your investigative workflows kept pace? Discover how Semantics 21 is helping investigators reduce manual effort, prioritise critical evidence and work smarter with modern forensic intelligence tools. #digitalforensics https://t.co/k2XrkJ8cZ6

[Forensic Focus @ForensicFocus]

What sets purpose-built investigative AI apart from general-purpose LLMs? Discover how Cellebrite Genesis helps investigators analyze digital evidence with traceable findings, warrant-bound search, and secure data handling. #digitalforensics https://t.co/WWes6lHqyg

[Forensic Focus @ForensicFocus]

Discover what’s new on Forensic Focus: explore WMI permanent event subscription persistence with Vitalii, see how MD-RED v4 handles AI-powered mobile forensic analysis, hear how user feedback shapes new features in Amped FIVE, and more. #digitalforensics https://t.co/c4tPB19UzD

[Forensic Focus @ForensicFocus]

Seven keynote speakers. One day. All online.
We're excited to partner on Forensics Forward, bringing together experts in digital forensics, cybersecurity & law!
📅 November 10, 2026 | 9 AM–5 PM ET
🔗 Register now: https://t.co/ZbqzXF3aI0

[Forensic Focus @ForensicFocus]

Join Detego Global in São Paulo on 26 November 2026 for an exclusive event showcasing cutting-edge digital forensics, AI-powered evidence analysis, and investigation management solutions designed to help investigators uncover critical ... #digitalforensics https://t.co/smAJ3YU5OD

[Forensic Focus @ForensicFocus]

Sam Abbot, Emi Polito and Andrea Frisina go behind the scenes to show how your feedback becomes new features in Amped FIVE, Replay, Authenticate and DVRConv, and why forensic soundness always comes first. #digitalforensics https://t.co/SAT4AsJCGZ

[Forensic Focus @ForensicFocus]

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber for offline forensic analysis; Passware Kit 2026 v4 adds YellowKey BitLocker recovery, E01 export and eCryptfs support, and more. #digitalforensics https://t.co/77L9q6d1s0

[Forensic Focus @ForensicFocus]

See how MD-RED v4 handles growing evidence volumes with AI-based media analysis, malware scanning, CDR correlation and PC messenger data in one workflow. #digitalforensics https://t.co/nBJvH2s4oY

[Forensic Focus @ForensicFocus]

Passware Kit 2026 v4 is here with expanded BitLocker decryption support for AMD and Lenovo devices, the new YellowKey method, Linux eCryptfs decryption, E01 export, and enhanced Apple support. #digitalforensics https://t.co/wCheHROulQ

[Forensic Focus @ForensicFocus]

Today: Europol and European Commission identify cloud, IoT and vehicle forensics gaps across EU member states; Framework guides examiners and attorneys on evidence authentication, attribution and courtroom testimony, and more. #digitalforensics https://t.co/OmRAwpKuOC

[Forensic Focus @ForensicFocus]

Today: Vitalii Kukhol details WMI permanent subscription detection using Sysmon, Volatility 3 and scrcons.exe artifacts; Atola Technology releases TaskForce firmware 2026.10 with a Compare module and Seagate fraud detection, and more. #digitalforensics https://t.co/Ea5hh2WCwA

[Forensic Focus @ForensicFocus]

Vitalii offers a hands-on DFIR deep dive into WMI ActiveScriptEventConsumer persistence, from registration and execution to memory artifacts, Sigma detection, and cleanup. #digitalforensics https://t.co/Cf0Kk0EpdJ

[Forensic Focus @ForensicFocus]

Today: Europol and the European Commission identify cloud, IoT and vehicle forensics gaps across EU Member States; Georgia Tech researchers build ORISA to recover deleted AI assistant chats from Android memory, and more. #digitalforensics https://t.co/LpMl2sfCsX

[Forensic Focus @ForensicFocus]

Meet Atola TaskForce firmware 2026.10, featuring a brand-new sector-by-sector Compare module, detection of used-drive fraud on Seagate devices, enhanced Web API automation, and 30+ improvements across forensic imaging workflows. #digitalforensics https://t.co/2vitkdBKiF

[Forensic Focus @ForensicFocus]

Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report #digitalforensics https://t.co/3EAXky1ivw

[Forensic Focus @ForensicFocus]

Discover what’s new on Forensic Focus: explore how the City of Johannesburg uses Detego Global to accelerate investigations, see how MD-LIVE takes investigators from first connection to a court-ready report, learn how iVe analyzes vehi... #digitalforensics https://t.co/aFnbnCwa0W

[Forensic Focus @ForensicFocus]

Digital evidence has evolved, and investigative tools must keep pace – discover how Semantics 21 helps investigators work faster, search smarter and maintain control without compromising professional judgement. #digitalforensics https://t.co/FikmyVAa8f

[Forensic Focus @ForensicFocus]

Today: Semantics 21 offers S21 VisionX, S21 CCTV and S21 Transcriber to replace legacy tools; eBPF rootkits LinkPro and VoidLink suppress EDR visibility at kernel level, and more. #digitalforensics https://t.co/qC9jP9X6S3

[Forensic Focus @ForensicFocus]

Jason Miranda and Evan Walker from Magnet Forensics show how Magnet Autokey pulls location history, connected devices and even text messages from encrypted vehicle infotainment systems in under 30 minutes. #digitalforensics https://t.co/CcE7MFRq7D